Stripe
Security GRC Program Manager, Third Party Risk
US - Hybrid · Mid
Sponsorship not specifiedDetected 10 hours ago
CybersecurityComplianceProcurementCommunication
Stay score
odds of building a lasting career here
42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Context, not a finding about this posting: of this employer's 4 green-card filings in this occupation, 100% were for a worker who already held the job.
Green-card follow-through: 72%
Of 47 labor certifications old enough to have been used, 13 expired without the employer filing the next step. Median time from filing to decision: 512 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.
Files H-1B transfers
70 transfer filings in the last year, covering 70 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The Stripe Security team is dedicated to improving the security of Stripe and its users.
- Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do.
- Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.
Responsibilities
- Independently manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements, renewals / reassessments, and material changes in relationship scope.
- Identify security gaps, determine proportionate remediation requirements, and clearly communicate findings to Stripe DRIs and cross-functional partners.
- Escalate novel, complex, or high-risk findings and support Enhanced Due Diligence and risk-acceptance processes when a third party cannot meet Stripe's security requirements.
- Partner with Procurement, Legal, Privacy, Business Continuity, Security, and business stakeholders to resolve assessment issues and support timely third-party onboarding.
- Ability to independently manage multiple assessments, priorities, and stakeholder relationships while meeting defined timelines.
- A collaborative approach and experience working with cross-functional partners such as Procurement, Legal, Privacy, and business teams.
Requirements
- 4+ years of relevant experience in third-party security risk, security assessments, information security, or a related risk-management function.
- Experience conducting end-to-end third-party security assessments, including reviewing security documentation, identifying control gaps, determining risk, and defining remediation requirements.
- Working knowledge of common security and assurance frameworks, such as SOC 2, ISO 27001, PCI DSS, NIST, and CSA.
- Sound judgment and analytical skills, including the ability to distinguish material security risks from lower-priority findings and recommend a proportionate response.
- Clear written and verbal communication skills, including the ability to explain technical security findings to non-security stakeholders.
- That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.
Nice to have
- Experience with third-party risk management platforms or procurement workflow tools such as Aravo, Zip, or similar systems.
- Experience with Enhanced Due Diligence, security risk acceptance, or third-party incident response.
- Experience improving or scaling a third-party risk assessment program
Benefits
- Track assessment volume, aging, service levels, remediation status, and other program-health indicators
- Experience using operational data and reporting to identify trends, communicate program health, and improve processes.
Company info
- About Stripe
- Stripe is a financial infrastructure platform for businesses. Millions of companies-from the world's largest enterprises to the most ambitious startups-use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.
- About the team
- The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.
- Stripe is a financial infrastructure platform for businesses.
- Millions of companies-from the world's largest enterprises to the most ambitious startups-use Stripe to accept payments, grow their revenue, and accelerate new business opportunities.
- Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead.
- The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders.
- The team also manages security risk arising from Stripe's relationships with third parties by assessing their security controls, identifying and mitigating risk, and supporting informed onboarding and risk-acceptance decisions.
- Our work helps Stripe move quickly while maintaining clear and consistent security expectations.
This listing is sourced directly from Stripe's careers page and normalized into a canonical job model.